c83930f428326899cf7edf7dbed2d6d6ba427343126621f7d1ba4f871994e61d | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 07:13

Sharing

Report Analysis Logs

General

Target

2cf0640a8815b28dbb79f807b27d30dc.pdf
Size

35KB
MD5

2cf0640a8815b28dbb79f807b27d30dc
SHA1

943390a0a0d07bfcf68e814b88beaf1ee31c100d
SHA256

c83930f428326899cf7edf7dbed2d6d6ba427343126621f7d1ba4f871994e61d
SHA512

4024ebd1f8c5c0d7819f98b2883e855fb2fc62324921ac1c21198f642bf2f2445f658defa3396d379b1629c50a015a26415c25ae03afaf74ed7320b06232ae7c
SSDEEP

768:mMckHNvsstEcBIvKSknobCphT2HUD/3cMHsAD:PJxhBIEnompNCe/HsAD

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2536	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2536	AcroRd32.exe
2536	AcroRd32.exe
2536	AcroRd32.exe
2536	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2cf0640a8815b28dbb79f807b27d30dc.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b44661524eb18a021f22aa065672f131

SHA1
e7ddf6ff8d76bd6cb344992ba7439c0b6aad17bf

SHA256
856bfd62cdb905037bed1413518f577b176a4f070420305eae807567e661a36f

SHA512
87626b21efc0868bec6443e1aba54eca4f972817ab0306cb369f3b518121a39d534205918f29a373fd35c082c7f23d44095a5bf9d7eaaf915d5fe659c49b2d74

Download Submit